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AMENDMENTS TO THE CLAIMS: 

1. (Previously presented) A method of preventing counterfeiting of a smart card, 
comprising: 

providing a smart card with a cryptographic structure for authorizing the smart card 
which cannot be accessed completely by a predetermined small number of readings, 

wherein said cryptographic structure can be built only by whoever emits the 
card or an agent thereof; 

providing a reader for reading said smart card and including a database holding 
information related to unauthorized smart cards, said reader being on-line, such thuL said 
reader is operatively connected to a network, only when said database ofsaid reader is being 
updated by said network, 

wherein said reader includes a random number generator, which, when a card 
is read, chooses a pair (a, b) of distinct numbers with a < b between 1 and N, 

wherein said smart card carries thereon predetermined N channels as CI, 
C2,..., CN, where N is an integer, 

wherein each channel Ci> with i equal to 1 , 2, N, carries a pair of numbers 

(hi, li), and 

* wherein hi is the 1 th high number and li is the i m low number, 
wherein said reader obtains a content of only two of said channels, and 
periodically communicating, by said reader of said smart card, with a database where 
a predetermined characteristic of the card is checked. 
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2. (Canceled). 

3. (Original) The method of claim 1 , wherein an entire process of said method is 
pcrformable oil -line. 

4. (Canceled). 

5. (Currently amended) The method of <Mm 4 claim U further comprising: 

using public key cryptography with associated encoding and decoding functions Vi 
and Vi' 1 in each channel i, 

wherein each function Vi' 1 is known publicly, and Vi is known only to a 
predetermined party representing an owner of the smart card, 

6. (Original) The method of claim 5, wherein for each i in I, 2 N, the pair (hi, li) is 
such that hi = Vi(li), or hi = Vi(K(lt)), where K represents a publicly-known cryptographic 
hash function, and 

wherein each li contains a plurality of symbols for redundancy. 
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7. (Original) The method of claim 6, further comprising: 

processing, using an invertible function f which is made public, such that the low 
numbers in said smart curd satisfy = l 3 (li), where 9 represents the j* iteration of the 
function f. 

8. (Previously presented) The method of claim 6, wherein before processing the smart 
card, the reader obtains the pair (ha, la) and hb; 

using the public keys Va" 1 and Vb' 1 , checking by the reader whether the pairs (ha, la) 
and (hb, lb) are compatible, and, consequently, that the numbers ha, la, and hb belong to a 
same legitimate card. 

9-10. (Canceled). 

11. (Currently amended) The method of cluim 1 0 claim 1 . wherein the predetermined 
characteristic comprises whether a smart card has delivered more than a predetermined 
amount of money to a user of the smart card. 

12. (Original) The method of claim 1 1, wherein ifa card is detected as delivering too 
much money, the data base communicates a corresponding number 11 to all readers in a 
network, so that smart cards carrying said corresponding number are declined. 


PAGE 5/23 * RCVD AT 9/7/2006 10:56:20 PM [Eastern DayOght Time] * SVR:Ua>T0-EFXRF-1/14 * DK1S:273830D * CSID:7034330096 ■ DURATION (miH$);0M2 


SEP 07,2006 10:54P 


7034330096 


page 6 


U.S. Application No. 09/685,026 5 
Docket No, YOR920000165IJS1 
(YOR.203) 

1 3 . (Original) Ihe method o f claim 1 , wherein said cryptographic structure is changed 
periodically. 

1 4. (Original) The method of claim 1 , wherein said smart card is invalidated after a 
predetermined time of usage. 

15. (Original) The method of claim 8, wherein said pairs (hi, li) to be contained on the 
smart card are generated by: 

choosing a prefix of 11 once for all transactions, or changed whenever needed, 
wherein said prefix is publicly known; and 

providing a sequence, such that the sequence is generated so that a same number is 
not chosen twice, and so that corresponding other li's are not chosen as new lis. 

16. (Original) The method of claim 15, further comprising: 
concatenating the prefix and the sequence to form 1 1 ; and 

choosing a function f which is jnvertible and is publicly known, to construct 12 = 
tj[ll), 13 = ((12), and so forth. 

1 7. (Original) The method of claim 1 6, wherein the function f is chosen to be the identity 
map, in which case II - 12 ™ 13 = ...^IN. 
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18. (Original) The method of claim 1 7, choosing, for a number N, N public key-private 
key pairs, such that a first private key VI is for computing hi ^ VI (II), a second private key 
V2 is for computing h2 - V2(12), and so on. 

1 9. (Original) The method of claim 1 8, further comprising: 
verifying whether the smart card is authentic; and 

checking whether the smart card is not in a list of cards to be refused. 

20. (Previously presented) 'Arc method of claim I, wherein, when the smart card is read 
by said reader, a random generator is prompted which provides two integer numbers, a and b, 
which are not between I and N, with a < b. 

2 1 . (Original) The method of claim 20, wherein said numbers a, b are transmitted to the 
smart card which delivers two high numbers ha, hb, and a low number la in a channel a, and 

wherein the pair (a, b), together with a function fin a memory in the reader, are used 
to compute the low number lb = f <lM1) (la), said memory in said reader delivering public keys 
Va'and Vb"'. 

22. (Original) The method of claim 21 , wherein the public keys arc used by a comparator 
together with the pairs (ha, la) and (hb, lb), to verify that the pairs are compatible with the 
corresponding keys, and that the pairs are from a same legitimate card. 


PA(£ 7/23 ' RCVD AT 9/7/2006 10:56:20 PM [Eastern DayQght Time] s SVR:USPT0^XRF-1/14 ft DN1S:2H8300 f CSID:7D34330096 1 DURATION (mm-ss):D5>12 


SEP 07,2006 10:55P 


7034330096 


page 8 


U.S. Application No. 09/685,026 7 
Docket No. YOR920000165US1 
(YOR.203) 

23. (Previously presented) The method of claim U ftirther comprising: 
performing a final validation of the smart card by at least one of: 

contacting a central data base if an entire transaction is made on-line with no 

penalty; and 

checking with a local data base in said reader, said local database being 
refreshed periodically by contact between said local database and said central database. 

24. (Currently amended) A method of preventing counterfeiting of a smart card, 
comprising: 

providing a smart card such that none of confidential information and a cryptographic 
key tor authorizing the smart card, is carried on the smart card; 

reading said card by a reader such that in each reading, said reader reads only a 
predetermined small amount ofinformation which makes the card unique, 

wherein said reader includes a random number generator, which, when a card is read, 
chooses a pair (a, b) of distinct numbers with a < b between 1 and N, 

wherein before processing the smart card, the reader obtains the pair (ha, la) and hb; 

using the public keys Va" 1 and Vb" 1 , checking by the reader whether the pairs (ha, la) 
and (hb ? lb) are compatible, and, consequently, that the numbers ha, la, and hb belong to a 
same legitimate card* 

wherein said pairs (hi, 10 to be contained on the smart card are generated by: 

choosing a pre fi x of 1 1 once for all transactions, or changed whenever needed, 
wherein said pre fix is p ublicly known: 
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providing a sequence, such lhat the sequence is gen erated so that a same 
number is not c hosen twice, and so that corresponding other li's are not chosen as new lis: 
concatenating the prefix and the sequence to form.ll; 

choosing a func tion f which is invertible and is publicly known, to construct 12 
- flfll). 13 <- ll\2\ and so forth* wherein the function f is chosen to be the identity map, in 
which case 11 - 12 - 13 = ...=lN;_and 

choosing, for a number N. N public key-private key pairs, such that a first private key 
V 1 is for computing hi ~ V 1 (1 W a second private key V2 is tor computing h2 = V2(12K and 
soon. 


25. (Original) The method of claim 24, wherein a transaction performed under said 
method comprises substantially an off-line transaction. 

26. (Currently amended) A system for preventing cloning of a smart card, comprising: 
a smart card such that a cryptographic structure for authorizing the smart card is not 

carried on the smart card; and 

a reader for reading the smart card and including a database for linking to a network 
and being updated periodically with a list of unauthorized smart cards, 

wherein said reader includes a random number generator, which,, when a card is read, 
chooses a pair (a, b) of distinct numbers with a < b between 1 and N, 

wherein before processing the smart card, the reader obtains the pair (ha, la) and hb; 
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using the public keys Va' 1 and Vb"\ checking by the reader whether the pairs (ha, la) 
and (hb, lb) arc compatible, and, consequently, that the numbers ha, la, and hb belong to a 
same legitimate card, and 

wherein said cryptographic structure is kept secret by whoever emits the card or an 
agent thereof 

wherein said pairs (hi, li) to be contained on the smart card are generated by: 

choosing a prefix of 11 once for all transactions^ or changed whenever needed, 

where in said prefix is pu blicly known: 

providing a sequence, such that the sequence is generated so that a same 

number is not chosen twice, and so that corresponding other IPs are not chosen as new Us: 
concatenating the prefix and the sequence to form 1 1 ; 

choosing a function f which is invertible and is publicly known, to construct 12 
- Ifll ), 13 = fl!2), and so forth, wherein the function f is chosen to be the identity map, in 
which case 11 = 12 = 13 - ...~1N: and 

choosing, for a number N. N public kev-private key pairs, such that a first private key 
VI is for computing hi = VU11 ), a second private key V2 is for computing h2 = V2fl2). and 
soon. 


27. (Currently amended) A signa l h e arin g computer-readahle medium tangibly 
embodying a program of record able, machine-readable instructions executable by a digital 
processing apparatus to perform a method for preventing counterfeiting and cloning of smart 
cards, comprising: 
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providing a smart card with a cryptographic structure for authorizing the smart card 
which cannot be accessed completely by u predetermined number of readings, 

reading said card by a reader such that in each reading, said reader reads only a 
predetermined small amount of information which makes the card unique, 

wherein said reader includes a random number generator, which, when a card is read, 
chooses a pair (a, b) of distinct numbers with a < b between 1 and N ? 

wherein before processing the smart card, the reader obtains the pair (ha, la) and hb; 

using the public keys Va" 1 and Vb"\ checking by the reader whether the pairs (ha, la) 
and (hb> lb) are compatible, and, consequently, that the numbers ha, la, and hb belong to a 
same legitimate card, and 

wherein said cryptographic structure can be built only by whoever emits the card or 
an agent thereof 

wherein said pairs (hi. li) to be contained on the smart card are generated by: 

choosing a prefix of 1 1 once for all transactions, or changed whenever needed, 

wherein said prefix is publicly known; 

providing a sequence, s uch that the sequence is generated so that a same 

number is not c hosen twice, and so that corresponding other li's are not chosen as new Us: 
concatenating the prefix and the sequence to form H ; 

choosing a function fwhich is invertible and is publicly known, to construct 12 
- ffl 1) J3 - ffl2 ), a nd so forth, wherein the function f is chosen to be the identity map, in 
which case 11 =12 =13 = ...=lN:and 
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choosing, lor a number N, N public key-private key pairs, such that a fir st priva te key 
VI is for computing hi = V l fll). a second private kev V2 is tor computing h2 = V2H2), and 
soon . 


28. (Previously presented) The melhod of claim 1, wherein information stored on said 
smart card is devoid of confidential information. 

29. (New) The method of claim 15, wherein said sequence comprises equal to or less than 
1024 bite. 
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